V10000 G2/G3 hardware setup

Deployment and Installation Center | Web and Email Security Solutions | Version 7.8.x

Applies to:

Web Security v7.8.x

Web Security Gateway and Web Security Gateway Anywhere v7.8.x

Email Security Gateway and Email Security Gateway Anywhere v7.8.x

V10000 G2 and V10000 G3 v7.8.x

The appliance's network interfaces must be able to access a DNS server and the Internet, as described below. This information varies slightly depending on the security mode you choose for the appliance.

V10000 G2/G3: Web mode with Web Security Gateway

V10000 G2/G3: Email mode

V10000 G2/G3: Web and Email mode with Web Security Gateway

V10000 G2/G3: Web and Email mode with Web Security (no content gateway)

V10000 G2/G3: Web mode with Web Security Gateway

Network interface C must be able to access a DNS server. This interface typically has continuous access to the Internet. Essential databases are downloaded from Websense servers through interface C (or optionally through P1).

Ensure that interface C is able to access the download servers at download.websense.com. (As an alternative, some sites configure the P1 proxy interface to download the Websense Master Database as well as other security updates. This change must be made in the Web Security manager. In that situation, interface C does not require Internet access.)

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

V10000 G2/G3: Email mode

Network interface E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that E1 (and E2, if used) can access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the E1 (and E2) interface can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

V10000 G2/G3: Web and Email mode with Web Security Gateway

Network interfaces C, P1, and E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that interfaces C, P1, and E1 (and E2, if used) are able to access the download servers at download.websense.com. (Note that some sites configure the P1 proxy interface instead of the C interface to download the Websense Master Database as well as other security updates. This change must be made in the Web Security manager. In that situation, interface C does not require Internet access.)

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C, P1, and E1 (and E2, if used) interfaces can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

V10000 G2/G3: Web and Email mode with Web Security
(no content gateway)

Network interfaces C and E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that interfaces C and E1 (and E2, if used) are able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C and E1 (and E2, if used) interfaces can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

Network interface N must be connected to a mirror port on a router or switch.

If interface N is used to send blocking information, then it must be connected to a bi-directional mirror port. Through the bi-directional mirror port, interface N not only monitors all client traffic but also sends blocking information if needed.